cf start app and cf logs app --recent sometimes cause Unauthorized error

[Vukia]

Dears,
this situation suddenly happened, after times, it can work again. The error log is:

REQUEST: [2014-07-31T11:42:16+08:00]
POST /oauth/token HTTP/1.1
Host: uaa.10.0.11.21.xip.io
Accept: application/json
Authorization: [PRIVATE DATA HIDDEN]
Content-Type: application/x-www-form-urlencoded
User-Agent: go-cli 6.3.2-217929b / linux

grant_type=refresh_token&refresh_token=eyJhbGciOiJSUzI1NiJ9.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.c7dNj4DgRHhLIjTIBZYGL3xOAApF8IBtNOA1Z9ViLpRQfTYd6j4DH_CH2wCK-_-h35CLOH-4Cvb9Zt0uzIMX8BthiJUgCG-6biCZ2uKjKs5vKKFQ8nxrUSPprdtud1fEJdgbz_vpTo4sVJqSjW8W0ZcH9Gc8AIvIxLH3lC0go4E&scope=

RESPONSE: [2014-07-31T11:42:17+08:00]
HTTP/1.1 200 OK
Content-Length: 2027
Cache-Control: no-store
Content-Type: application/json;charset=UTF-8
Date: Thu, 31 Jul 2014 03:42:17 GMT
Pragma: no-cache
Server: Apache-Coyote/1.1

{"access_token":"[PRIVATE DATA HIDDEN]","token_type":"bearer","refresh_token":"[PRIVATE DATA HIDDEN]","expires_in":599,"scope":"scim.read cloud_controller.admin password.write scim.write openid cloud_controller.write cloud_controller.read","jti":"bf6ee256-a66c-4deb-8216-0ac99b29c76b"}
FAILED
Unauthorized error: You are not authorized. message:"Error: Invalid authorization" message_type:ERR timestamp:1406778138066610385 app_id:"cc901917-bb51-47c0-8a33-e4210572cb3d" source_name:"LGR"
FAILED
Unauthorized error: You are not authorized. message:"Error: Invalid authorization" message_type:ERR timestamp:1406778138066610385 app_id:"cc901917-bb51-47c0-8a33-e4210572cb3d" source_name:"LGR"

[tjarratt]

Sounds like the cli is getting an "invalid authorization" error log message back from loggregator instead of a proper 401. This happens when your token expires just before a request is made to retrieve logs, which would explain why it only occurs sometimes, and will work again afterwards.

My understanding was that this bug had been fixed in the last few months, but the fix is not entirely in the CLI -- it is also dependent on the version of cloud foundry you're using.

Can you provide us the cf-release you deployed to 10.0.11.21.xip.io? My guess is that you've deployed an older release, and upgrading to something recent like cf-release 175 will resolve this issue. I could be wrong though, it's possible this behavior regressed again.

[Vukia]

I'm using CF v176, this bug has existed since v171, and it more offen occurs in windows-CF-CLI,
and if I use linux-CF-CLI to use cf logs --recent and return ok, the windows-cli can work again

[goehmen]

@Vukia - I'm aware of a few stories being completed in this area. Is this something that you are still seeing in the CLI or have you upgraded and seen the problem resolved? Thanks

[goehmen]

@Vukia Closing due to inactivity & the fact that the issue was likely resolved. Please reopen if the need arises.